Fetching from the wire…
01
02
03
04
05
06
07
08
Agents2026-08-06 · source-backed
arXiv 2608.04192 separates file secrecy from functional secrecy: even with perfect protection against prompt-injection file dumps, a user can rebuild what the files do. It forms an interface hypothesis from the skill's public description, issues benign structured probes, synthesizes an executable replica, then repairs it through differential validation against the victim. Exact or partial recovery on held-out inputs across 30 skills. Vaguer descriptions offered limited protection; the defense that works is rate-limiting cumulative information leakage from legitimate use.
Each link below shares sources, entities, or timing with this story.
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (agent, exact, file); pushes against this story (but).
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, skill); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, even); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, defense); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, skill); pushes against this story (against).
Same source domain / Shared topic
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, exact, file).
Reported by the same outlet (arxiv.org); overlapping topics (against, agent, file, skill).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (against, agent); pushes against this story (against).